| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-26 12:54 UTC | macvlan: require lower-netns admin for shared port settings | 1 | doruk@0sec.ai | finished in 5h50m0s |
| 2026-07-26 12:03 UTC | net: flow_offload: serialize driver callback lists | 2 | bestswngs@gmail.com | finished in 5h21m0s |
| 2026-07-26 11:32 UTC | block,md,nvme: correct handling of unsupported P2PDMA transfers | 6 | mykola@meshstor.io | finished in 5h3m0s |
| 2026-07-26 10:55 UTC | tls: fix plaintext sk_msg ring over-fill in tls_sw_sendmsg_splice() | 1 | ppoo1220@gmail.com | finished in 4h52m0s |
| 2026-07-26 09:29 UTC | RDMA: Support HW requiring relaxed ordering and add Unordered access flag | 1 | michaelgur@nvidia.com | finished in 4h48m0s |
| 2026-07-26 09:21 UTC | packet: use consistent header lengths in raw send paths | 2 | q.h.hack.winter@gmail.com | finished in 5h32m0s |
| 2026-07-26 07:18 UTC | net/x25: fix use-after-free of the socket by its timers | 1 | baul.lee@xbow.com | finished in 5h53m0s |
| 2026-07-26 06:25 UTC | net: bridge: mrp: fix uninitialised bytes on the wire | 1 | baul.lee@xbow.com | finished in 5h39m0s |
| 2026-07-26 06:25 UTC | freevxfs: fix off-page read on a crafted dirblock | 1 | baul.lee@xbow.com | finished in 1h48m0s |
| 2026-07-26 06:25 UTC | udf: fix OOB read for a crafted unallocSpaceEntry | 1 | baul.lee@xbow.com | finished in 2h22m0s |
| 2026-07-26 06:04 UTC | sctp: fix transport UAF via the retransmit queue | 1 | baul.lee@xbow.com | finished in 5h31m0s |
| 2026-07-26 05:33 UTC | net/x25: fix use-after-free in x25_kill_by_neigh() | 1 | baul.lee@xbow.com | finished in 5h36m0s |
| 2026-07-26 04:01 UTC | s390/vfio_ccw fixes | 5 | farman@linux.ibm.com | finished in 2h38m0s |
| 2026-07-26 01:48 UTC | mm/damon/ops-common: putback folios on invalid migrate nid | 3 | dayou5941@163.com | finished in 5h54m0s |
| 2026-07-25 16:00 UTC | Use generic_file_read_iter() in hugetlbfs | 5 | willy@infradead.org | finished in 5h46m0s |
| 2026-07-25 15:26 UTC | s390/vfio_ccw fixes | 4 | farman@linux.ibm.com | finished in 2h5m0s |
| 2026-07-25 13:51 UTC | mac802154: fix use-after-free of sdata via queued RX frames | 3 | security@auditcode.ai | finished in 5h34m0s |
| 2026-07-25 10:14 UTC | mm/huge_memory: Initialise workingset state before folio split | 2 | matt@readmodwrite.com | finished in 5h16m0s |
| 2026-07-24 20:33 UTC | wifi: mwifiex: Detach sync cmd buffer on interrupted wait | 1 | festevam@gmail.com | finished in 2h41m0s |
| 2026-07-24 19:52 UTC | mm/huge_memory: Initialise workingset state before folio split | 1 | matt@readmodwrite.com | finished in 5h24m0s |
| 2026-07-24 19:24 UTC | net/sched: cls_route: fix fastmap use-after-free and preserve netns teardown ordering | 2 | jhs@mojatatu.com | finished in 5h16m0s |
| 2026-07-24 16:12 UTC | net: hsr: fix GRO/GSO super-packet handling | 2 | xiexinet@gmail.com | finished in 5h11m0s |
| 2026-07-24 15:01 UTC | netdev: require admin permission for the bind-tx netlink operation | 1 | doruk@0sec.ai | finished in 39m0s |
| 2026-07-24 14:40 UTC | net/packet: reset the MAC header on the packet-socket transmit path | 2 | doruk@0sec.ai | finished in 5h21m0s |
| 2026-07-24 14:00 UTC | qede: Fix NULL pointer dereference in TPA fragment processing | 2 | nagarevaibhav@gmail.com | skipped |
| 2026-07-24 13:42 UTC | net: usb: ipheth: fix carrier_work UAF on disconnect | 1 | doruk@0sec.ai | finished in 3h18m0s |
| 2026-07-24 10:45 UTC | xfrm: enforce hard byte lifetime in xfrm_input() | 1 | yangyx22@mails.tsinghua.edu.cn | finished in 4h48m0s |
| 2026-07-24 09:25 UTC | wifi: brcmfmac: Set DMA direction for msgbuf packet IDs | 1 | pengcan@kylinos.cn | finished in 3h0m0s |
| 2026-07-24 09:01 UTC | net: atlantic: convert RX path to page_pool | 2 | cyy@cyyself.name | skipped |
| 2026-07-24 01:46 UTC | virtio_balloon: add VIRTIO_BALLOON_F_REPORTING_PM_SAFE feature bit | 1 | linkl@google.com | finished in 4h52m0s |
| 2026-07-23 22:56 UTC | sctp: reject stale cookies with mismatched verification tags | 1 | yangyx22@mails.tsinghua.edu.cn | finished in 5h6m0s |
| 2026-07-23 22:14 UTC | KVM s390x PCI fixes | 6 | alifm@linux.ibm.com | finished in 2h35m0s |
| 2026-07-23 20:41 UTC | block,md,nvme: correct handling of unsupported P2PDMA transfers | 5 | mykola@meshstor.io | finished in 5h19m0s |
| 2026-07-23 20:22 UTC | wifi: mwifiex: validate action frame fixed fields | 3 | enderaoelyther@gmail.com | finished in 3h47m0s |
| 2026-07-23 18:34 UTC | KVM s390x PCI fixes | 5 | alifm@linux.ibm.com | finished in 2h27m0s |
| 2026-07-23 17:47 UTC | s390/vfio_ccw fixes | 3 | farman@linux.ibm.com | finished in 3h5m0s |
| 2026-07-23 16:26 UTC | bpf, sockmap: Fix cork ownership in tcp_bpf_sendmsg() | 3 | nicoyip.dev@gmail.com | finished in 4h50m0s |
| 2026-07-23 15:34 UTC | bpf, sockmap: Fix cork ownership in tcp_bpf_sendmsg() | 2 | nicoyip.dev@gmail.com | finished in 27m0s |
| 2026-07-23 15:16 UTC | mm: fix UAF caused by race between ptdump and vmap pgtable freeing | 6 | ljs@kernel.org | finished in 39m0s |
| 2026-07-23 14:42 UTC | vxlan: fixes for skb header pulling, cloning, and concurrency in TX path | 1 | edumazet@google.com | finished in 5h31m0s |
| 2026-07-23 14:30 UTC | Use generic_file_read_iter() in hugetlbfs | 4 | willy@infradead.org |
finished
in 6h6m0s
[3 findings] |
| 2026-07-23 14:00 UTC | s390/qeth: Check CAP_NET_ADMIN for private ioctls | 1 | aswin@linux.ibm.com | skipped |
| 2026-07-23 13:41 UTC | mm: use precise current RSS for high-water accounting | 1 | nirmoyd@nvidia.com | finished in 5h16m0s |
| 2026-07-23 11:55 UTC | mm/slub: fix missing debugfs entries for caches created before sysfs init | 2 | lixiasong1@huawei.com | skipped |
| 2026-07-23 11:45 UTC | wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() | 2 | nihaal@cse.iitm.ac.in | finished in 2h19m0s |
| 2026-07-23 10:54 UTC | net/smc: fix socket use-after-free during link group termination | 1 | xuanqiang.luo@linux.dev | finished in 4h49m0s |
| 2026-07-23 10:52 UTC | net/sched: cls_route: fix fastmap use-after-free on filter | 1 | jhs@mojatatu.com | finished in 6h4m0s |
| 2026-07-23 09:37 UTC | super: fix emergency thaw deadlock on frozen block devices | 1 | brauner@kernel.org | finished in 5h4m0s |
| 2026-07-23 06:04 UTC | bpf: lwt: Fix dst reference leak on reroute failure | 1 | xuanqiang.luo@linux.dev | finished in 4h56m0s |
| 2026-07-23 05:56 UTC | wifi: brcmfmac: validate msgbuf flowring IDs before use | 1 | pengcan@kylinos.cn | finished in 2h25m0s |
| 2026-07-23 03:24 UTC | mm: vmscan: fix node reclaim ignoring swappiness parameter | 1 | ridong.chen@linux.dev | finished in 5h53m0s |
| 2026-07-23 02:58 UTC | mm: vmscan: fix node reclaim ignoring swappiness parameter | 1 | ridong.chen@linux.dev | skipped |
| 2026-07-23 02:29 UTC | tipc: validate Gap ACK blocks header before parsing | 1 | kudo3228@gmail.com | finished in 5h55m0s |
| 2026-07-23 02:03 UTC | net/packet: reset the MAC header on the packet-socket transmit path | 1 | doruk@0sec.ai | finished in 5h2m0s |
| 2026-07-23 01:10 UTC | wifi: mwifiex: validate action frame fixed fields | 2 | enderaoelyther@gmail.com | finished in 2h36m0s |
| 2026-07-22 23:41 UTC | Fix bugs on HugeTLB folio allocation failure paths | 4 | devnull@kernel.org | finished in 4h55m0s |
| 2026-07-22 23:01 UTC | KVM: nVMX: Service local TLB flushes on failed nested VM-Enter | 2 | yosry@kernel.org | finished in 5h17m0s |
| 2026-07-22 19:19 UTC | veth: convert frag_list skbs before running XDP | 3 | matt@readmodwrite.com | finished in 5h12m0s |
| 2026-07-22 17:18 UTC | net: hsr: fix GRO/GSO super-packet handling | 1 | xiexinet@gmail.com | finished in 6h26m0s |
| 2026-07-22 14:56 UTC | mm: fix reclaim storms in defrag_mode | 2 | hannes@cmpxchg.org | finished in 5h0m0s |
| 2026-07-22 14:09 UTC | s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() | 1 | akrowiak@linux.ibm.com | finished in 2h15m0s |
| 2026-07-22 13:02 UTC | selftests: Add missing initalization of pointer passed to getline | 2 | christian.gellermann@codasip.com | skipped |
| 2026-07-22 13:01 UTC | netfs: Keep track of folios in a segmented bio_vec[] chain | 7 | dhowells@redhat.com | finished in 1h21m0s |
| 2026-07-22 12:57 UTC | netfilter: nf_conntrack_h323: fix get_bitmap() overread | 1 | kudo3228@gmail.com | finished in 3h0m0s |
| 2026-07-22 12:45 UTC | io_uring/rw: fix missing ERESTARTSYS conversion in read paths | 2 | yi1tang.yang@gmail.com | finished in 2h27m0s |
| 2026-07-22 12:12 UTC | wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() | 1 | nihaal@cse.iitm.ac.in | finished in 2h14m0s |
| 2026-07-22 11:39 UTC | amt: fix use-after-free in AMT delayed works | 1 | shlomojune6@gmail.com | finished in 4h36m0s |
| 2026-07-22 11:07 UTC | wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() | 1 | nihaal@cse.iitm.ac.in | finished in 2h27m0s |
| 2026-07-22 10:17 UTC | net/smc: validate peer CDC cursor against RMBE size before accepting it | 2 | security@auditcode.ai | finished in 3h12m0s |
| 2026-07-22 10:16 UTC | mac802154: lock rx_mac_cmd_list and drain it before freeing sdata | 2 | security@auditcode.ai | finished in 4h39m0s |
| 2026-07-22 08:38 UTC | fou: Fix use-after-free in fou_create() | 1 | xuanqiang.luo@linux.dev | finished in 4h48m0s |
| 2026-07-22 07:04 UTC | wifi: mt76: mt7925: validate CLC firmware records | 1 | acharyalaxman8848@gmail.com | finished in 2h16m0s |
| 2026-07-22 03:47 UTC | nfc: st-nci: drain se_info timers on remove before NCI teardown | 1 | fanwu01@zju.edu.cn | finished in 3h42m0s |
| 2026-07-21 22:14 UTC | mptcp: misc fixes for v7.2-rc5 | 1 | matttbe@kernel.org | finished in 5h13m0s |
| 2026-07-21 21:12 UTC | mac802154: hold an interface reference across the scan worker | 3 | security@auditcode.ai | finished in 2h50m0s |
| 2026-07-21 16:47 UTC | KVM: VMX: add memory clobber to asm for VMX instructions | 1 | pbonzini@redhat.com | finished in 2h6m0s |
| 2026-07-21 16:40 UTC | badblocks: fix rounding bug and validate input range | 7 | adhikari.resume@gmail.com | finished in 3h45m0s |
| 2026-07-21 13:35 UTC | nfc: trf7970a: drain timeout_work and keep trf->lock valid across teardown | 1 | fanwu01@zju.edu.cn | skipped |
| 2026-07-21 12:14 UTC | x86/mm/pat: allocate split page tables as kernel page tables | 2 | ljs@kernel.org | finished in 5h37m0s |
| 2026-07-21 11:53 UTC | wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO | 2 | security@auditcode.ai | finished in 1h52m0s |
| 2026-07-21 11:20 UTC | binfmt_elf_fdpic: only honour the first PT_INTERP | 1 | brauner@kernel.org | finished in 2h43m0s |
| 2026-07-21 10:35 UTC | igb/igbvf: disable work items before device removal | 1 | xuanqiang.luo@linux.dev | finished in 3h16m0s |
| 2026-07-21 10:28 UTC | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | 1 | pbonzini@redhat.com | finished in 4h52m0s |
| 2026-07-21 10:28 UTC | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 1 | pbonzini@redhat.com | finished in 5h37m0s |
| 2026-07-21 10:08 UTC | exec: fix unsigned loop counter wrap in transfer_args_to_stack() | 1 | brauner@kernel.org | skipped |
| 2026-07-21 09:23 UTC | igbvf: fix DMA mapping leak on Tx error | 1 | xuanqiang.luo@linux.dev | finished in 3h23m0s |
| 2026-07-21 08:58 UTC | phonet: pep: fix use-after-free in pep_get_sb() | 1 | leitao@debian.org | finished in 5h15m0s |
| 2026-07-21 08:49 UTC | packet: use a consistent hard_header_len in send paths | 1 | q.h.hack.winter@gmail.com | finished in 5h33m0s |
| 2026-07-21 07:36 UTC | RISC-V: KVM: Serialize IMSIC attributes with vCPU migration | 1 | xb@ultrarisc.com | finished in 2h35m0s |
| 2026-07-21 01:58 UTC | net/packet: defer vmalloc TX_RING free until skbs finish | 1 | kylebot@openai.com | finished in 57m0s |
| 2026-07-21 00:55 UTC | mm/page_reporting: use system_freezable_wq to fix UAF during suspend | 3 | linkl@google.com | finished in 5h30m0s |
| 2026-07-21 00:25 UTC | Fix bugs on HugeTLB folio allocation failure paths | 3 | devnull@kernel.org | finished in 5h59m0s |
| 2026-07-20 23:27 UTC | wifi: mt76: restrict NPU/PPE active checks to MMIO devices | 1 | lucid_duck@justthetip.ca | finished in 3h21m0s |
| 2026-07-20 20:52 UTC | KVM: x86: Remove AMX-TF32 enumeration | 2 | chang.seok.bae@intel.com | finished in 4h48m0s |
| 2026-07-20 20:27 UTC | net: x25: fix use-after-free in x25_kill_by_neigh() | 1 | security@auditcode.ai | finished in 4h53m0s |
| 2026-07-20 20:19 UTC | s390/vfio_ccw fixes | 2 | farman@linux.ibm.com | finished in 2h58m0s |
| 2026-07-20 20:10 UTC | block: validate direct I/O memory alignment | 1 | kbusch@meta.com | finished in 5h1m0s |
| 2026-07-20 18:49 UTC | rds: synchronize info callbacks with connection teardown | 1 | nicoyip.dev@gmail.com | finished in 5h5m0s |
| 2026-07-20 17:45 UTC | KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk | 2 | devnull@kernel.org | finished in 5h29m0s |
| 2026-07-20 17:07 UTC | net/smc: validate peer CDC cursor against RMBE size before accepting it | 1 | security@auditcode.ai | finished in 3h13m0s |